Intel® UEFI Reference Server Firmware Advisory

Summary: A potential security vulnerability in the UEFI for some Intel® server reference platforms may allow denial of service. Intel is releasing UEFI firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20077 Description: Missing release of memory...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-20077

CVE-2025-20077 concerns a missing release of memory after the effective lifetime in the UEFI OobRasMmbiHandlerDriver module on some Intel® reference server platforms. Intel’s advisory (INTEL-SA-01300) states this could allow a privileged user to cause a denial of service via local access. The iss...